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Amendments to the Claims; 

This listing of claims is to replace all prior versions and listings of claims in 
this application: 

1. (Currently Amended) A method comprising: 
receiving an original digital good; and 

randomly applying various forms of protection to a plurality of segments of 
the original digital good to produce a protected digital good, 

wherein at least two of the segments overlap one anothe r, wherein 
overlapping segments are different from each other but include some identical 
data. 

2. (Original) A method as recited in claim 1, wherein the randomly 
applying comprises pseudo randomly applying the various forms of protection 
according to pseudo random techniques. 

3. (Original) A method as recited in claim 1, wherein the applying 
comprises randomly selecting the forms of protection from a set of available forms 
of protection. 

4. (Original) A method as recited in claim 1, wherein the applying 
comprises applying the various forms of protection to randomly selected portions 
of the original digital good. 
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5. (Original) A method as recited In claim 1, wherein the various forms 

2 of protection are selected from a group of protection tools comprising code 

3 integrity verification, acyclic code integrity verification, cyclic code integrity 

4 verification, secret key scattering, obfuscated function execution, 
s encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
g lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 



7 



8 methods, and time/space separation between tamper detection and response. 

10 6. (Original) A method as recited in claim 1, wherein the applying 

1 1 comprises applying a form of protection in which a checksum can be computed on 

12 a set of bytes of the digital good without actually reading the bytes. 

13 

14 1 7. (Original) A computer-readable medium comprising computer- 
is readable instructions that, when executed by a processor, direct a computer system 
ia I to perform the method as recited in claim 1 . 

17 

8. (Currently Amended) A method comprising; 

19 segmenting a digital good into a plurality of segments; 

20 selecting multiple segments from the plurality of segments; and 

21 transforming only the selected segments according to different protection 
72 techniques to produce a protected digital good having a composite of variously 
23 1 protected segments. 

24 
25 
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9. (Original) A method as recited in claim 8, wherein at least two of the 
segments overlap one another. 

10. (Original) A method as recited in claim 8, wherein the selecting 
comprises randomly selecting the segments. 

11. (Original) A method as recited in claim 8, wherein the transforming 
comprises transforming the selected segments according to randomly chosen 
protection techniques. 

12. (Original) A method as recited in claim 8, wherein the transfonning 
comprises: 

augmenting at least one segment using a certain protection technique; and 
inserting a checkpoint, which may be used to evaluate a validity of the 

augmented segment, within the protected digital good but outside of the 

augmented segment being evaluated. 

13. (Original) A method as recited in claim 8, further comprising 
receiving quantitative parameters indicative of how much the protected digital 
good should be altered* 

14. (Original) A method as recited in claim 13, wherein the 
transforming is performed to satisfy the quantitative parameters. 
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15. (Original) A method as recited in claim 8, wherein the protection 
techniques are selected from a group of protection tools comprising code integrity 
verification, acyclic code integrity verification, cyclic code integrity verification, 
secret key scattering, obfuscated function execution, encryption/decryption, 
probabilistic checking, Boolean check obfuscation, in-lining, reseeding pseudo 
random number generators with time varying inputs, anti-disassembly methods, 
varying execution paths between runs, anti-debugging methods, and time/space 
separation between tamper detection and response. 

16. (Original) A method as recited in claim 8, wherein the transforming 
comprises applying a protection technique in which a checksum can be computed 
on a set of bytes of the digital good without actually reading the bytes. 

17* (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim 8. 

18. (Original) A method comprising: 

establishing parameters prescribing a desired quantity of protection to be 
applied to a software product; 

parsing the software product into code sections; 
selecting at least one code section; 

augmenting the selected code section to add protection qualities; and 
repeating the selecting and the augmenting for different code sections until 
the desired quantity of protection has been applied. 
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19* (Original) A method as recited in claim 18, wherein the establishing 
comprises enabling a user to enter the parameters, 

20. (Original) A method as recited in claim 18, wherein the augmenting 
comprises applying a protection technique selected from a group of protection 
techniques comprising code integrity verification, acyclic code integrity 
verification, cyclic code integrity verification, secret key scattering, obfuscated 
function execution, encryption/decryption, probabilistic checking, Boolean check 
obfuscation, in-lining, reseeding pseudo random number generators with time 
varying inputs, anti-disassembly methods, varying execution paths between runs, 
anti-debugging methods, and time/space separation between tamper detection and 
response. 

21. (Original) A method as recited in claim 18, wherein the augmenting 
comprises applying a protection technique in which a checksum can be computed 
on a set of bytes of the digital good without actually reading the bytes. 

22. (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim 18. 

23. (Currently Amended) A production system, comprising: 
a memory to store an original digital good; and 



lee & Hayes, put 

RESPONSE TO OFFICE ACTION DATED JUNE 7, 2004 



ATTORNEY DOCKET NO. MSI -5I5US 



PAGE 8125 * RCVD AT 1016/2004 4:04:02 PM [Eastern Daylight Time] ' SVR:USPT0£FXRF-1/7 ' DNIS:8729306 ' CSID:509 323 8979 ' DURATION (mm-ss):07-04 



OCT &6 2004 13:20 FR LEE - HAYES PLL 509 323 8979 TO 17038729306 P. 09/25 



a production server equipped with a set of multiple protection tools that 
may be used to augment the original digital good for protection purposes, the 
production server being configured to parse the original digital good and apply 
protection tools selected from the set of protection tools only to selected portions 
of the original digital good in a random manner to produce a protected digital good 
having a composite of the protected selected portions. 

24. (Original) A production system as recited in claim 23, wherein the 
protection tools are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation* in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

25. (Original) A production system as recited in claim 23, wherein the 
production server applies a protection tool that enables a checksum to be 
computed on a set of bytes of the digital good without actually reading the bytes. 

26. (Original) A production system as recited in claim 23, wherein the 
production server has a pseudo random generator to introduce randomness into the 
application of the protection tools to various portions of the original digital good. 
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27. (Currently Amended) An cbfiiscation system, comprising: 
a parser to parse a digital good into a plurality of segments; 
a set of protection tools that may be applied to the segments of the digital 
good to augment the segments with protection qualities; 

a target segment selector to select at least one segment from the plurality of 
segments; and 

a tool selector to select at least one protection tool from the set of protection 
tools and apply the selected protection tool to the selected segmen t so that a 
protection tool of the set of protection tools is applied only to a se lected segment 
10 of the plura lity of segments, 
ii 

12 I 28. (Original) An obfiiscation system as recited in claim 27, wherein 

13 the protection tools are selected from a group of protection tools comprising code 

14 integrity verification, acyclic code integrity verification, cyclic code integrity 

15 verification, secret key scattering, obfuscated function execution, 

16 encryption/decryption, probabilistic checking, Boolean check obfiiscation, in- 
n lining ft reseeding pseudo random number generators with time varying inputs, anti- 
is disassembly methods, varying execution paths between runs, anti-debugging 
19 methods, and time/space separation between tamper detection and response. 

20 

21 I 29- (Original) An obfiiscation system as recited in claim 27, wherein 

22 the target segment selector comprises a pseudo random generator to enable 

23 | random selection of the segment. 

24 
25 
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1 30* (Original) An obfuscation system as recited in claim 27, wherein 

2 the tool selector comprises a pseudo random generator to enable random selection 

3 of the protection tool, 

4 

5 31. (Original) An obfuscation system as recited in claim 27, further 

6 comprising a quantitative unit to specify a quantity of protection qualities to be 

7 added to the digital good. 

8 

9 32. (Currently Amended) A client-server system, comprising: 

ia a production server to randomly apply various forms of protection only to 

i \ selected portions of a digital good to produce a protected digital good; and 

12 a client to store and execute the protected digital good, the client being 

13 configured to evaluate the protected digital good to determine whether the 

14 protected digital good has been tampered with, 

15 

16 33. (Currently Amended) One or more computer-readable media 

17 having computer-executable instructions that, when executed, direct a computing 
is device to; 

19 parse a digital good into a plurality of segments; and 

to apply multiple different protection tools to only a selected portion of the 

21 segments in a random manner to produce a protected digital good having a 

22 composite of variously protected portions. 

23 
24 
25 
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34* (Original) One or more computer-readable media as recited in claim 
33, further comprising computer-executable instructions to randomly select the 
protection tools from a set of available protection tools. 

35. (Original) One or more computer-readable media as recited in claim 
33, further comprising computer-executable instructions to apply the protection 
tools to randomly selected portions of the original digital good. 

36. (Original) One or more computer-readable media as recited in claim 
33, wherein the protection tools are selected from a group of protection tools 
comprising code integrity verification, acyclic code integrity verification, cyclic 
code integrity verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with time varying inputs,, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 
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